64 Commits (5b7143885d195d59cd6c3982314f9b92fa60d8aa)

Author	SHA1	Message	Date
Frank Karlitschek	2eb9936d77	This will be 8.2 in the future	10 years ago
Lukas Reschke	9d1ce53cb1	Add some generic default headers as well via PHP	10 years ago
Wolfgang Karall	6cc50ecfab	use permanent redirect for .well-known/(cal|card)dav, add 'L' flag	10 years ago
Lukas Reschke	bbd5f28415	Let users configure security headers in their Webserver ... Doing this in the PHP code is not the right approach for multiple reasons: 1. A bug in the PHP code prevents them from being added to the response. 2. They are only added when something is served via PHP and not in other cases (that makes for example the newest IE UXSS which is not yet patched by Microsoft exploitable on ownCloud) 3. Some headers such as the Strict-Transport-Security might require custom modifications by administrators. This was not possible before and lead to buggy situations. This pull request moves those headers out of the PHP code and adds a security check to the admin settings performed via JS.	10 years ago
Lukas Reschke	d201f1c47e	Fix version rev	10 years ago
Frank Karlitschek	270d404ee2	This is 8.0.1 now	10 years ago
Lukas Reschke	43641d917b	Use "off" and "off" instead of true booleans ... Apparently a boolean in php.ini is according to the documentation "on" or "off"… Fixes itself.	10 years ago
Lukas Reschke	9b46e3b3d5	Add expected values to default config as well	10 years ago
Fernando Rodriguez Sela	66b584ae7e	Setting default charset to UTF-8 in .htaccess and .user.ini	10 years ago
Lukas Reschke	20199dd168	Reference module with `.c` ... Fixes https://github.com/owncloud/core/issues/13657	10 years ago
Lukas Reschke	bb80cf4eca	Add check for `HTTP_RAW_POST_DATA` setting for >= 5.6 ... PHP 5.6 otherwise throws notices for perfectly valid code which results in broken endpoints. Fixes https://github.com/owncloud/core/issues/13592	10 years ago
Lukas Reschke	7fbb7f4dc4	Add version to .htaccess ... Currently if a user does not replace the .htaccess file with the new update this can lead to serious problems in case Apache is used as webserver. This commit adds the version to the .htaccess file and the update routine fails in case not the newest version is specified in there. This obviously means that every release has to update the version specified in .htaccess as well. But I see no better solution for it. Conflicts: lib/private/updater.php	10 years ago
Morris Jobke	e97219cf75	escape . in htaccess regex for CSS and JS HTTP headers	10 years ago
Robert Jäckel	1a6928f447	blocked 3rdparty instead of l10n	10 years ago
Robert Jäckel	8c3bf139ff	restrict access to public files only ... use mod_rewrite to pretend theese files are not existend for security purposes	10 years ago
Thomas Müller	4b5c7d3d9d	adding cache control headers for css and js - fixes #11496	10 years ago
Lukas Reschke	bd4f3849a3	That file was accidentally commited. Partially revert f2fc214ce0	11 years ago
Lukas Reschke	f2fc214ce0	Add deprecation notice to load* functions ... This functions are deprecated and/or removed since ownCloud 7. Additionally a issubdirectory check has been added here to prevent developers to use this function in a potentially insecure way. Port of https://github.com/owncloud/core/pull/9033	11 years ago
Lukas Reschke	ac7fb1b23e	Remove legacy routing code ... The getfile routing code was absolutely legacy and not needed anymore. Additionally \OC::$REQUESTEDAPP was never set to the actually accessed application. This commit removes the legacy routing code and ensures that $REQUESTEDAPP is always set so that other applications (e.g. the firewall or a two-factor authentication) can intercept the currently accessed app. Testplan: [x] Installation works [x] Login with DB works [x] Logout works [x] Login with alternate backend works (tested with user_webdavauth) [x] Other apps are accessible [x] Redirect on login works (e.g. index.php?redirect_url=%2Fcore%2Findex.php%2Fsettings%2Fapps%3Finstalled) [x] Personal settings are accessible [x] Admin settings are accessible [x] Sharing files works [x] DAV works [x] OC::$REQUESTEDAPP contains the requested application and can be intercepted by other applications	11 years ago
Felix Eckhofer	61ca269292	Remove trailing tab	11 years ago
Felix Eckhofer	460d06c235	Escape literal dots in mod_rewrite regexes	11 years ago
Lukas Reschke	357fdb1a4d	Remove .htaccess creation code ... 1. We're maintaining the same code twice which leads inevitably to problems as this one. The createHtaccess routine is only used to use the correct paths to the 404 and 403 document. 2. Updating the ownCloud instance as described in our documentation (`Delete everything from your ownCloud installation directory, except data and config.`) will break the links to the ErrorDocuments anyways and show the default error handlers if ownCloud is not installed in the root directory.	11 years ago
Thomas Müller	01929096fe	revert wrong change to .htaccess	11 years ago
Thomas Müller	bf22ed7bdb	kill old minimizer code	11 years ago
Thomas Müller	269f24cf96	remove css files from rewrite rule - there is no need to rewrite css any more	11 years ago
Thomas Müller	5eef107344	turn off mod_pagespeed	11 years ago
Thomas Tanghus	78559c0863	disable mbstring.func_overload	12 years ago
Daniel Molkentin	a86fe7920b	Try to prefer index.php over index.html in the same directory ... Add JS redirect if that fails (HTTP-based redirects are disabled by default in more recent Firefox versions).	12 years ago
Myles McNamara	ef2e84026e	remove php_value ... php_value can only be used with mod_php, using it with FCGI will cause 500 Internal Server errors.  This needs to be set in php.ini manually or set using ini_set().	12 years ago
Brice Maron	6c26214955	Refix #1931	12 years ago
Bernhard Posselt	26d5992161	add cgi pathinfo when fcgi is enabled #1189	12 years ago
Bernhard Posselt	023f19e929	added defaultcharset to utf-8 in htaccess	12 years ago
Sam Tuke	d2b288ca70	Reverted erroneous commit	12 years ago
Erik Sargent	48d6f33135	Revert "initial setup" ... This reverts commit e1478117b1.	12 years ago
Erik Sargent	e1478117b1	initial setup	12 years ago
Michiel de Jong	e37dd7aa82	add /.well-known/host-meta.json to .htaccess	12 years ago
Stefan Seidel	8f669880bc	Fix WebDAV (and Android Client) not being able to authorize on Debian Squeeze + mod_fcgid installs.	12 years ago
Robin Appelman	6bc156ba69	add svg mimetype to default htaccess	12 years ago
Bjoern Schiessle	bd494f562f	fixed faulty commit	13 years ago
Bjoern Schiessle	378fa2bc86	check if caview really exists	13 years ago
Robin Appelman	f1b10fcc93	update translations	13 years ago
Robin Appelman	f7d221f5f0	update translations	13 years ago
Georg Ehrke	9e83c3f823	add caldav and carddav files in their old place for backward compatibility - add rewriterule for caldav and carddav	13 years ago
Michiel de Jong	4c6d11e223	move auth.css and remoteStorage-big.png to assets folders From where they can be included	13 years ago
Georg Ehrke	3f86fd5193	remove redirects in htaccess to improve compatibility with desktop client	13 years ago
Michiel de Jong	02cee2c562	trying to fix /.well-known/host-meta	13 years ago
Georg Ehrke	a69c53caef	remove empty line in .htaccess	13 years ago
Georg Ehrke	9bdd00c0f2	update htaccess file and remove remote folder	13 years ago
Bart Visscher	f69f764e8b	Working remote.php with webdav and caldav	13 years ago
Bart Visscher	b62a8ba0f8	Better regex for old apps rewrite rule	13 years ago